f18f9d7fd2a8f36aa90bfb2b2a7df9d5721e3c43e872d67ae1aef86fe0557298 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f18f9d7fd2a8f36aa90bfb2b2a7df9d5721e3c43e872d67ae1aef86fe0557298
Size

121KB
MD5

92060179e0eb28fd87ecdb693531ce20
SHA1

1f4e5b50f40b866aa77ebc0d02557a63354daff5
SHA256

f18f9d7fd2a8f36aa90bfb2b2a7df9d5721e3c43e872d67ae1aef86fe0557298
SHA512

b7bbe15b80a2c7833de0e36f9063cde4d890083520683093f4d8e8eb8197b2ad64a88144e76089c71b033fda570da87bfc1e0993ce9fe70803b4bae519f02a7e
SSDEEP

1536:fbEn9QKI+xC6At1XWO5jXkU3ZOrewP/jMry9EUbEaVtOb0NtG2Z7+kfX6SC:fbE9g+A6At1hTkJrewQGhEaeb0LskfqJ

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

f18f9d7fd2a8f36aa90bfb2b2a7df9d5721e3c43e872d67ae1aef86fe0557298
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 232KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 109KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

JFru,"*v
Size: 210KB - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

U8Qa/6Q(
Size: 118KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ